session - Stop direct access to .html pages without , redirect to login.php

Question

I've been looking for an answer to make all my other .html pages in the root directory(or outside of) to be checked against if a session has taken place or not. If not direct visitor back to index.php (where login is, set in public_html). Does anyone have a work around for this? If so where would I put the "if no session redirect"? So if someone just goes directly to www.site.com/here.html the php runs and see's if the session had been instated, if not redirects to www.site.com/login.php.

Answer 1

Use this:

<?php
if(!session_id()){
    header('Location: /index.php');
    exit;
}
?>

Just place it at the top of your html file

Or to be on the safe side, check if an index in the session is set like:

if(!isset($_SESSION['user'])){
    // redirect code
}

For this to work, on user login, you need to set

$_SESSION['user'] = 'something'; // a real value here!